StarLabs Glossary / IT Procurement Terms
MDM — Mobile Device Management
One place to secure, set up and control every company laptop, phone and tablet.
Mobile device management (MDM) is software that lets a business manage its laptops, phones and tablets from a central console. IT can enforce passcodes and encryption, push apps and settings, see which devices are out of date, and lock or wipe a lost device remotely, without needing to touch it.
How it works
Each device is enrolled into an MDM service. Once enrolled, it checks in with the service and applies whatever rules the business has set. Because the rules live centrally, a change made once reaches every device, whether it sits in the office or with a staff member working from home.
Well-known MDM tools include Microsoft Intune, which is common in businesses that use Microsoft 365, and Jamf, which focuses on Apple devices. Apple Business Manager is not an MDM itself. It is Apple’s portal for linking company-owned Apple devices to whichever MDM you choose, so they enrol automatically when switched on.
Typical things an MDM can do:
| Capability | Why it matters |
|---|---|
| Enforce a passcode | No device holding company data is left unlocked |
| Require encryption | A stolen laptop’s drive cannot be read without the key (BitLocker on Windows, FileVault on Mac) |
| Remote lock and wipe | Protects data when a device is lost, stolen or not returned by a leaver |
| App deployment | Installs and updates work apps without staff doing it by hand |
| Update and compliance reports | Shows which devices are missing security updates |
| Wi-Fi, email and VPN profiles | New devices connect to company systems with the right settings |
For phones that staff own themselves, most MDM tools offer a lighter mode that manages only the work apps and data, and leaves personal photos and messages alone. A selective wipe then removes company data without erasing the whole phone.
What it means for your business
If your staff carry client data on laptops and phones, a lost device is a data protection problem, not just a hardware cost. MDM is how you prove each device was encrypted and how you wipe it quickly. It also cuts setup time for new hires and makes offboarding cleaner. Many SMEs already pay for an MDM through their Microsoft 365 plan without using it, so check your licences before buying something new.
Common questions
Does a small business need MDM?
If you have more than a handful of devices, or any device holds customer or staff personal data, MDM is worth having. It is the simplest way to make sure every device is encrypted, locked and can be wiped if it goes missing.
Can my employer see my personal data with MDM?
On a company-owned device, the business can see device details and installed apps. On a personal phone enrolled in a work-only mode, the business typically manages the work apps and data only. What is visible depends on the tool and settings, so businesses should explain this clearly to staff.
What is the difference between MDM and Apple Business Manager?
Apple Business Manager registers your company-owned Apple devices and points them to your MDM. The MDM, such as Intune or Jamf, then applies the settings, apps and security rules. You usually need both for hands-off Apple setup.
Want every company device locked down?
We set up and look after business laptops and phones from purchase onwards.
Sources: Apple Support: Use Automated Device Enrollment, Microsoft Learn: Windows Autopilot registration overview
Reviewed by the StarLabs technical team · Last checked 18 October 2026
